From: Oliver Böttcher <oliver.boettcher@pixelpark.com>
Date: Tue, 11 Jul 2017 12:51:38 +0000 (+0200)
Subject: ODT - INT ssl emm_webservice
X-Git-Tag: v0.1.0~2668^2~1
X-Git-Url: https://git.uhu-banane.de/?a=commitdiff_plain;h=1948c19363e084fd79986c730add4cabb4d86c60;p=pixelpark%2Fhiera.git

ODT - INT ssl emm_webservice
---

diff --git a/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml b/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml
index 3a3ac488..efd40136 100644
--- a/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml
+++ b/customer/mbvd-odt/int-odt-daimler-com.pixelpark.net.yaml
@@ -24,7 +24,7 @@ infra::profile::apache::pp_vhosts:
     ssl_cert: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
     ssl_key: '/etc/pki/tls/private/wildcard.pixelpark.net-key.pem'
     ssl_chain: '/etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem'
-    #ssl_verify_client: require
+    ssl_verify_client: require
     ssl_crl: '/etc/pki/tls/certs/odt-cacrl.pem'
     ssl_ca: '/etc/pki/tls/certs/odt-root-ca.pem'
     custom_fragment_ssl: 'SSLRequire %%{ich-trickse}{SSL_CLIENT_I_DN_O} eq "ODT"'
@@ -51,6 +51,7 @@ infra::profile::apache::pp_vhosts:
         provider: location
         path: '/'
         custom_fragment: |
+          # enabled until merge of 71e4c530d286b8f11863d16ee94bc2f28f800cce
           SSLRequire %%{ich-trickse}{SSL_CLIENT_I_DN_O} eq "ODT"
           SSLVerifyClient require
       - webservice:
@@ -60,9 +61,6 @@ infra::profile::apache::pp_vhosts:
           - 'ip 93.188.107.192/26'
           - 'ip 217.66.50.0/24'
           - 'ip 217.66.51.0/24'
-        custom_fragment: |
-          SSLVerifyClient none
-          SSLRequire none
       - newsletterservice:
         provider: location
         path: '/newsletterservice'